Senior PAM and Vault Automation Engineer 100% (f/m/d)

Julius Baer; Madrid; In loco; EUR 60.000 - 90.000; Tempo pieno

Descrizione del lavoro

Julius Baer is seeking an engineer to advance automation for Privileged Access Management and HashiCorp Vault. You will design scalable automation services, build enterprise integrations, and implement secret lifecycle and provisioning workflows in a global, security-focused environment.

The role emphasizes Python development, IaC, and GitOps to enable rapid, secure product delivery and strong operational resilience across platforms.

Competenze

• Strong Python development and REST API design experience.
• Proven ability to build scalable enterprise automation platforms.
• Experience with IAM, PAM, and Vault integrations.
• Hands-on with Terraform, Ansible, and GitLab CI/CD.

Mansioni

• Design and maintain automation services for PAM and Vault.
• Develop enterprise APIs and integration services.
• Implement secret lifecycle management and provisioning workflows.
• Automate governance, IAM, and security workflows.

Conoscenze

Python

REST APIs

CI/CD

Terraform

Ansible

GitLab CI/CD

GitOps

Kubernetes

HashiCorp Vault

PAM

IAM

CMDB

Kafka

Microservices

Logging/Monitoring

Strumenti

Delinea Secret Server

Fleet Commander

Terraform

Descrizione del lavoro

At Julius Baer, we celebrate and value the individual qualities you bring, enabling you to be impactful, to be entrepreneurial, to be empowered, and to create value beyond wealth. Let's shape the future of wealth management together.

Julius Baer Group Ltd. acts in the sector Private Banking and is present in over 25 countries and around 60 locations. With the Headquartered in Zurich, we have offices in key locations including Bangkok, Dubai, Dublin, Frankfurt, Geneva, Hong Kong, London, Luxembourg, Madrid, Mexico City, Milan, Monaco, Mumbai,
Santiago de Chile, São Paulo, Shanghai, Singapore, Tel Aviv and Tokyo.
We are looking for a highly skilled engineer to drive the automation roadmap of our Privileged Access Management (PAM) and HashiCorp Vault platforms. The role will focus on software engineering, automation, API integrations, Infrastructure-as-Code, and platform development to increase scalability, improve security, and reduce operational effort across the organization.
The successful candidate will serve as the primary engineering resource responsible for designing, developing, and maintaining automation services that integrate PAM (Delinea Secret Server), HashiCorp Vault, IAM, CMDB, Service Management, and infrastructure platforms.

YOUR CHALLENGE

• Design, develop, and maintain automation services supporting PAM (Delinea Secret Server) and HashiCorp Vault
• Develop enterprise-grade APIs and integration services
• Build self-service onboarding capabilities for application teams
• Implement automated secret lifecycle management
• Design and maintain account provisioning and deprovisioning workflows
• Automate privileged access governance processes
• Develop PAM and Vault integrations, automation frameworks, and reusable automation patterns
• Implement secrets rotation and certificate management workflows

YOUR PROFILE

• Strong software engineering background with extensive experience in Python development, object-oriented design, REST APIs, automated testing, CI/CD pipelines, code reviews, and building scalable, maintainable enterprise applications and automation platforms
• Experience designing, developing, and automating solutions around HashiCorp Vault, enterprise PAM platforms, and Fleet Commander
• Ability to translate security and access management requirements into robust software solutions, workflows, integrations, and self-service capabilities
• Proven experience integrating complex enterprise systems through APIs, event-driven architectures, and messaging platforms
• Familiarity with Identity & Access Management (IAM), Active Directory/Entra ID, ITSM,CMDB, and security platforms, as well as technologies such as Kafka and microservices-based architectures
• Hands-on experience with Terraform, Ansible, GitLab CI/CD, GitOps practices, and automated deployment patterns
• Strong understanding of software delivery, infrastructure automation, configuration management and large-scale platform operations
• Ability to design scalable, resilient, and observable platforms, including logging, monitoring, configuration management, dependency lifecycle management, cloud-native technologies such as Kubernetes and enterprise endpoint management solutions including Fleet Commander
• Team player, strong collaborator with the willingness to take ownership
• Excellent communication skills in spoken and written form
• Strong desire to learn and develop new skills
• Highly proactive, self-driven, and focused on delivering measurable business outcomes
• Capable of independently prioritizing and resolving incidents, problems, and change requests with minimal supervision
• Strong analytical and conceptual thinking skills, with attention to detail and consideration for long-term architectural impacts
• Ability to thrive in a globally distributed team environment